Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/MkhUTVF6tLdNkb4iTtyN5eolFVU.roa
File: MkhUTVF6tLdNkb4iTtyN5eolFVU.roa (raw, json)
Hash identifier: VQztDybugZz5TD05+zuhMFXejDDjP0ZZ1PI+vNwMK5E=
Subject key identifier: 32:48:54:4D:51:7A:B4:B7:4D:91:BE:22:4E:DC:8D:E5:EA:25:15:55
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01904772A691CFA6ADEA1730BD0083CF4B38
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/MkhUTVF6tLdNkb4iTtyN5eolFVU.roa
Signing time: Sun 23 Jun 2024 23:33:34 +0000
ROA not before: Sun 23 Jun 2024 23:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 22
89.34.96.0/24 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 23
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
94.177.17.0/24 maxlen: 24
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 22
185.16.204.0/22 maxlen: 22
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 22
185.137.36.0/24 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 22
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a0b:b840::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 06 Jul 2024 10:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:47:72:a6:91:cf:a6:ad:ea:17:30:bd:00:83:cf:4b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jun 23 23:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3248544d517ab4b74d91be224edc8de5ea251555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:98:1b:bb:4b:a9:a0:2c:53:e6:86:5f:d5:
0a:99:d3:36:20:9d:7a:4f:94:f8:ef:a8:b2:73:b6:
e2:f5:b8:33:4a:a0:ca:8a:41:e9:ea:5c:68:f2:5a:
34:08:bf:29:91:1c:a7:ea:7f:81:f3:bd:d8:64:2a:
99:42:ec:21:fd:9b:30:71:7f:95:b9:6a:b3:4b:cc:
65:b6:82:5d:17:7b:5d:b9:89:2f:73:de:ef:d1:ca:
78:0b:a3:88:b9:85:2b:83:22:5f:48:eb:3f:66:36:
f7:81:75:ee:18:63:17:bc:0e:fe:78:d7:b9:16:3b:
1a:95:48:b1:db:a5:0d:dd:71:15:0b:ea:50:1b:b1:
03:4e:d4:51:34:14:7a:b0:a5:0b:b2:0c:3e:0c:a8:
2d:29:b2:3a:b4:b3:2a:e3:89:2f:19:3d:36:c5:ea:
ae:fb:0a:a2:bc:9e:3e:0f:c2:f8:23:0d:16:8c:d5:
1d:27:d6:09:ec:16:df:07:8b:75:1b:3f:ab:b7:16:
13:8f:ee:f9:6f:81:0c:48:47:bc:75:d7:e6:8e:ef:
02:76:90:a9:a0:6e:f5:55:71:2d:d5:a6:88:e0:5c:
12:53:4d:d7:98:c6:b4:57:09:01:bc:2d:fb:9e:25:
84:44:76:35:b3:cf:f5:ee:76:12:d5:b9:51:e0:63:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:48:54:4D:51:7A:B4:B7:4D:91:BE:22:4E:DC:8D:E5:EA:25:15:55
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/MkhUTVF6tLdNkb4iTtyN5eolFVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
77:a0:7c:ad:cd:d9:32:ff:b9:0c:b6:80:14:f9:2d:3b:b2:87:
13:25:46:c4:60:78:ae:a4:94:c5:da:c1:d1:68:c8:17:4d:6f:
40:0a:95:d4:16:c7:65:47:7d:13:5f:e0:33:ec:ef:38:12:aa:
42:d3:72:6a:cc:be:36:75:04:e0:7b:80:e5:d8:97:69:f6:89:
40:3f:b7:b8:48:93:44:37:7a:a0:7b:dc:92:03:89:58:ed:7f:
96:92:84:41:3a:18:2c:3e:76:6a:28:36:88:26:09:a5:32:9b:
56:ca:a9:35:11:ff:3b:53:fd:50:a7:69:87:3c:43:d8:60:64:
e5:ce:f1:3d:b8:a1:c3:25:88:32:a5:f5:e6:71:0d:04:5f:05:
2f:d7:cd:30:fe:24:5f:eb:ff:1f:04:6c:46:85:04:6b:d6:f9:
b0:7f:79:b4:43:74:c3:82:a0:36:01:bc:bf:ed:83:40:6b:e5:
71:91:7f:9b:67:09:67:95:6d:0a:28:34:94:04:97:c4:9b:c5:
1c:8a:5d:11:61:6e:84:7e:8d:be:95:89:b5:ec:0a:97:9f:03:
0a:45:4c:2a:56:bd:0e:3a:c8:f8:59:f8:b3:b6:71:01:be:49:
35:03:cc:07:1d:d5:43:45:cc:87:bc:09:49:06:3e:5f:1b:27:
5d:38:8d:8b
-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgISAZBHcqaRz6at6hcwvQCDz0s4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjQwNjIzMjMzMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjQ4NTQ0ZDUxN2FiNGI3NGQ5MWJlMjI0ZWRjOGRlNWVhMjUxNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk06YG7tLqaAsU+aGX9UKmdM2IJ16
T5T476iyc7bi9bgzSqDKikHp6lxo8lo0CL8pkRyn6n+B873YZCqZQuwh/ZswcX+V
uWqzS8xltoJdF3tduYkvc97v0cp4C6OIuYUrgyJfSOs/Zjb3gXXuGGMXvA7+eNe5
FjsalUix26UN3XEVC+pQG7EDTtRRNBR6sKULsgw+DKgtKbI6tLMq44kvGT02xequ
+wqivJ4+D8L4Iw0WjNUdJ9YJ7BbfB4t1Gz+rtxYTj+75b4EMSEe8ddfmju8CdpCp
oG71VXEt1aaI4FwSU03XmMa0VwkBvC37niWERHY1s8/17nYS1blR4GN26wIDAQAB
o4IEPDCCBDgwHQYDVR0OBBYEFDJIVE1RerS3TZG+Ik7cjeXqJRVVMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvTWtoVVRWRjZ0TGROa2I0aVR0eU41ZW9sRlZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICUAYIKwYBBQUHAQcBAf8EggI/MIICOzCCAhoEAgABMIIC
EgMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQBLveOAwQC
QO/sAwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQEURPQAwQBUmHAAwQAVPcAAwQC
VPcoAwQAVcxGAwQCVmgUAwQCVmj4AwQAVmpZAwQAVmpwAwQAVmqHMAwDBABWap0D
BABWap4DBABWa/EDBAJZFUADBABZIH8DBAJZImADBABZIxkDBAJZIxwDBAJZJUAD
BAJZJawDBAFZJkQDBABZKNQDBAFZLt4DBAJZLvgDBABdclMDBABdcoEDBAJddigD
BABesREDBANtRWgDBANtRpADBABt5ssDBABt5tEDBABt5tcDBABt5toDBABt5twD
BAKAf5QDBACG//MDBAKw36wDBASy76ADBAK5A+wDBAK5EMwDBAK5JpQDBAK5LEwD
BAK5PZwDBAC5cuADBAK5eYgDBAK5fcwDBAK5hhQDBAK5iSQDBAK5nvADBAK5yMwD
BAK52JADBAK53+gDBAC81JoDBAO88DgDBAC88EcDBAC88XgDBAC88ZADBAG88ZwD
BAC88fYDBALBINADBALBsBwDBAHCMuoDBAHDFGwDBALDjNQwDAMEAMPOpQMEA8PO
oDAMAwQAw86pAwQCw86oAwQCw860AwQBw+p8AwQAw+p/AwQC1O3gAwQC1aZUAwQE
2ZJQMBsEAgACMBUDBQAqABowAwUAKgFAIAMFAyoLuEAwDQYJKoZIhvcNAQELBQAD
ggEBAHegfK3N2TL/uQy2gBT5LTuyhxMlRsRgeK6klMXawdFoyBdNb0AKldQWx2VH
fRNf4DPs7zgSqkLTcmrMvjZ1BOB7gOXYl2n2iUA/t7hIk0Q3eqB73JIDiVjtf5aS
hEE6GCw+dmooNogmCaUym1bKqTUR/ztT/VCnaYc8Q9hgZOXO8T24ocMliDKl9eZx
DQRfBS/XzTD+JF/r/x8EbEaFBGvW+bB/ebRDdMOCoDYBvL/tg0Br5XGRf5tnCWeV
bQooNJQEl8SbxRyKXRFhboR+jb6VibXsCpefAwpFTCpWvQ46yPhZ+LO2cQG+STUD
zAcd1UNFzIe8CUkGPl8bJ104jYs=
-----END CERTIFICATE-----
Generated at Sat Jul 6 12:08:29 2024 by rpki-client on console-fra.rpki-client.org